EUVD-2026-23917
GHSA-p3pj-xf59-54r5
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
7DescriptionNVD
Dell PowerProtect Data Domain appliances, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper privilege management vulnerability in IDRAC. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges to access unauthorized delete operation in IDRAC.
AnalysisAI
Dell PowerProtect Data Domain appliances versions 7.7.1.0-8.7.0.0, LTS2025 8.3.1.0-8.3.1.20, and LTS2024 7.13.1.0-7.13.1.60 contain an improper privilege management vulnerability in iDRAC that allows a high-privileged local attacker with user interaction to elevate privileges and perform unauthorized delete operations. The vulnerability requires high privileges and local access combined with user interaction, limiting real-world attack surface primarily to insider threats or physical facility access scenarios.
Technical ContextAI
Dell PowerProtect Data Domain appliances use iDRAC (Integrated Dell Remote Access Controller) for system management. This vulnerability stems from a CWE-269 (Improper Access Control) weakness in privilege management logic within iDRAC. The flaw allows a user possessing already-elevated privileges to leverage a configuration or interface flaw to gain additional unauthorized permissions for destructive operations (delete). The affected CPE string cpe:2.3:a:dell:powerprotect_data_domain_appliances indicates the vulnerability exists across multiple major versions of the Data Domain product line, with specific version ranges documented in the affected versions field.
RemediationAI
Apply the security update provided in Dell DSA-2026-060; consult the advisory for exact patched versions corresponding to each affected release (standard, LTS2025, and LTS2024). As a compensating control pending patch deployment, restrict iDRAC administrative access to a minimal set of named administrators, implement multi-factor authentication for iDRAC login if available, and enforce network-level access controls limiting iDRAC connectivity to trusted management networks only. Monitor iDRAC audit logs for privilege escalation attempts or unauthorized delete operations. Note that restricting iDRAC access may impact legitimate system administration workflows and should be tested in non-production environments first.
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today